$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ad891c-b2a6-4927-b56c-dde9df3a8628.roa File: c4ad891c-b2a6-4927-b56c-dde9df3a8628.roa (raw, json) Hash identifier: 0BuoGnRn2cpu3NHZ9aHe2iD1irmN2r4lXPuXZX6ItDo= Subject key identifier: 6F:16:00:27:F3:38:34:68:FF:CB:12:CC:C5:6C:24:22:24:E9:84:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 25053FB967EEAF28B6EB798D233FD6175709F782 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ad891c-b2a6-4927-b56c-dde9df3a8628.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:05:3f:b9:67:ee:af:28:b6:eb:79:8d:23:3f:d6:17:57:09:f7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=8f2715a909b04246986cde4d166fb9fea1215004cbe722b621cadff0903b148e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:07:04:c1:ef:4e:b0:02:8f:b6:0f:73:7d: f2:9e:f3:49:3d:3a:87:e4:91:74:59:13:45:b3:b6: a2:f0:76:c7:2e:5d:7f:b1:bb:76:2f:f1:3a:39:38: 9a:ea:07:3a:9e:28:87:c6:33:88:2a:67:80:64:21: 1b:81:00:e4:a2:d8:e4:ef:0b:7b:b7:40:9e:d0:f2: 95:26:69:9e:09:92:9d:9d:89:f1:eb:81:3b:43:62: dd:a8:94:74:40:44:84:3c:e3:74:51:e9:e6:24:35: ae:f0:59:a7:b0:6b:79:ea:b7:53:71:73:22:5f:70: e6:24:e0:e7:e8:98:28:96:f3:79:0b:29:64:18:a7: 7b:60:6b:e9:b2:de:4c:ed:a0:0b:32:9c:80:94:8c: 6b:76:a4:5c:29:e8:4b:40:0e:07:c1:1e:61:52:df: 0f:a5:eb:be:71:40:54:14:6e:b3:9e:76:3e:12:cd: 6c:36:9b:5a:93:7e:6d:3d:e4:87:d2:80:b2:09:2e: 6d:38:e5:5e:66:86:4f:3a:c3:59:d0:46:9b:ba:f6: f4:3d:47:d5:61:57:4f:e1:d0:d6:80:28:22:3e:df: 74:fb:cd:d1:4c:52:15:6d:2c:2b:19:5f:79:05:25: 6d:28:e1:ad:52:1b:be:0d:e8:16:bf:82:49:44:32: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:00:27:F3:38:34:68:FF:CB:12:CC:C5:6C:24:22:24:E9:84:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c4ad891c-b2a6-4927-b56c-dde9df3a8628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 27:c7:0a:48:11:31:a5:e6:e7:b4:30:be:7c:c1:56:b5:6a:e0: 8d:a8:63:ad:54:4f:ad:91:b1:72:75:d7:10:35:da:14:18:75: 94:9a:59:4d:15:fc:5f:1d:66:60:77:aa:c4:d0:14:c6:24:b8: d9:24:3b:de:e8:a7:56:2f:ad:b1:69:19:83:ab:96:d5:23:dd: 56:94:5a:12:c4:6e:39:71:84:49:dc:f0:00:16:07:8e:4d:88: 43:24:8c:e7:8d:10:55:22:67:6b:14:b3:d5:ce:a0:d9:db:5e: c4:da:73:9e:6f:08:ad:02:64:94:58:3d:00:63:2d:af:11:f6: 38:18:b9:db:e7:78:4a:c7:b7:fc:aa:f7:27:36:c2:51:09:ee: 82:d9:57:f2:d9:06:4f:84:02:18:19:34:96:d1:b3:d9:ce:5f: fa:2f:39:8f:9f:ff:4d:2e:30:6d:2f:1c:df:95:17:6d:0f:07: d3:3a:4f:50:cc:40:e4:a3:9e:73:be:5d:13:cd:38:c0:38:db: 11:36:b8:45:35:ad:b2:cb:93:bf:43:bd:9e:ae:8c:dc:77:33: 37:4a:b1:8b:91:6c:3b:a5:c8:77:32:67:fc:0f:23:0d:c3:56: 41:97:dc:db:ec:21:db:a9:0f:1f:46:be:27:fb:2e:36:d9:3a: fa:76:87:82 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJQU/uWfuryi263mNIz/WF1cJ94IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAOGYyNzE1YTkwOWIwNDI0Njk4NmNk ZTRkMTY2ZmI5ZmVhMTIxNTAwNGNiZTcyMmI2MjFjYWRmZjA5MDNiMTQ4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQYHBMHvTrACj7YPc33ynvNJPTqH 5JF0WRNFs7ai8HbHLl1/sbt2L/E6OTia6gc6niiHxjOIKmeAZCEbgQDkotjk7wt7 t0Ce0PKVJmmeCZKdnYnx64E7Q2LdqJR0QESEPON0UenmJDWu8FmnsGt56rdTcXMi X3DmJODn6JgolvN5CylkGKd7YGvpst5M7aALMpyAlIxrdqRcKehLQA4HwR5hUt8P peu+cUBUFG6znnY+Es1sNptak35tPeSH0oCyCS5tOOVeZoZPOsNZ0Eabuvb0PUfV YVdP4dDWgCgiPt90+83RTFIVbSwrGV95BSVtKOGtUhu+DegWv4JJRDL3UQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG8WACfzODRo/8sSzMVsJCIk6YRYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M0YWQ4OTFjLWIyYTYtNDkyNy1iNTZjLWRkZTlkZjNhODYyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8BAwDQYJKoZIhvcNAQELBQADggEBACfHCkgRMaXm57QwvnzB VrVq4I2oY61UT62RsXJ11xA12hQYdZSaWU0V/F8dZmB3qsTQFMYkuNkkO97op1Yv rbFpGYOrltUj3VaUWhLEbjlxhEnc8AAWB45NiEMkjOeNEFUiZ2sUs9XOoNnbXsTa c55vCK0CZJRYPQBjLa8R9jgYudvneErHt/yq9yc2wlEJ7oLZV/LZBk+EAhgZNJbR s9nOX/ovOY+f/00uMG0vHN+VF20PB9M6T1DMQOSjnnO+XRPNOMA42xE2uEU1rbLL k79DvZ6ujNx3MzdKsYuRbDulyHcyZ/wPIw3DVkGX3NvsIdupDx9Gvif7LjbZOvp2 h4I= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org